kandev/apps/web/components/settings/profile-edit/serialize-executor-config.test.ts

import { describe, expect, it } from "vitest";
import {
  buildSaveConfig,
  getExecutorProfileRuntimeFlags,
  type ExecutorProfileConfigForm,
} from "./serialize-executor-config";
import {
  createDefaultKubernetesProfileConfig,
  replaceKubernetesProfileConfig,
} from "../kubernetes-config";

function form(overrides: Partial<ExecutorProfileConfigForm> = {}): ExecutorProfileConfigForm {
  return {
    isSprites: false,
    networkPolicyRules: [],
    isRemote: true,
    remoteCredentials: [],
    configBundleIds: [],
    agentEnvVars: {},
    gitIdentityMode: "override",
    localGitIdentity: { userName: "", userEmail: "" },
    gitUserName: "",
    gitUserEmail: "",
    isDocker: false,
    isLocalDocker: false,
    dockerfile: "",
    imageTag: "",
    allowUserNamespaces: false,
    isSSH: false,
    sshShell: "",
    sshReclaimTaskDir: false,
    ...overrides,
  };
}

describe("buildSaveConfig", () => {
  it("classifies Kubernetes profiles as remote without Docker-only behavior", () => {
    expect(getExecutorProfileRuntimeFlags("k8s")).toEqual({
      isRemote: true,
      isDocker: false,
      isSprites: false,
      isKubernetes: true,
    });
  });

  it("preserves unrelated profile keys while saving Kubernetes and remote fields", () => {
    const shared = buildSaveConfig(
      form({
        remoteCredentials: ["git-auth"],
        configBundleIds: ["codex.settings"],
        gitUserName: "Kandev Agent",
        gitUserEmail: "agent@kandev.ai",
      }),
      { custom_key: "keep", "workspace.mode": "empty_dir" },
    );
    const config = replaceKubernetesProfileConfig(shared, {
      ...createDefaultKubernetesProfileConfig(),
      platform: "linux/arm64",
      workspaceMode: "existing_claim",
      claimName: "shared-workspace",
    });

    expect(config).toMatchObject({
      custom_key: "keep",
      remote_credentials: '["git-auth"]',
      agent_config_bundles: '["codex.settings"]',
      git_user_name: "Kandev Agent",
      git_user_email: "agent@kandev.ai",
      platform: "linux/arm64",
      "workspace.mode": "existing_claim",
      "workspace.claim_name": "shared-workspace",
    });
  });

  it("persists selected configuration without requiring authentication", () => {
    const config = buildSaveConfig(form({ configBundleIds: ["mock.settings"] }), {
      remote_credentials: "stale",
      keep: "yes",
    });

    expect(config).toEqual({
      agent_config_bundles: '["mock.settings"]',
      keep: "yes",
    });
  });

  it("persists authentication without requiring configuration", () => {
    const config = buildSaveConfig(form({ remoteCredentials: ["codex-auth"] }));

    expect(config).toEqual({ remote_credentials: '["codex-auth"]' });
  });

  it("persists allowUserNamespaces when enabled on a Docker profile", () => {
    const config = buildSaveConfig(
      form({ isDocker: true, isLocalDocker: true, allowUserNamespaces: true }),
    );
    expect(config.allow_user_namespaces).toBe("true");
  });

  it("removes allowUserNamespaces key when disabled", () => {
    const config = buildSaveConfig(
      form({ isDocker: true, isLocalDocker: true, allowUserNamespaces: false }),
    );
    expect(config.allow_user_namespaces).toBeUndefined();
  });

  it("removes allowUserNamespaces when not a Docker profile", () => {
    const config = buildSaveConfig(form({ isDocker: false, allowUserNamespaces: true }));
    expect(config.allow_user_namespaces).toBeUndefined();
  });

  it("removes allowUserNamespaces from a remote Docker profile", () => {
    const config = buildSaveConfig(
      form({ isDocker: true, isLocalDocker: false, allowUserNamespaces: true }),
      { allow_user_namespaces: "true" },
    );
    expect(config.allow_user_namespaces).toBeUndefined();
  });
});

describe("buildSaveConfig ssh_reclaim_task_dir", () => {
  it("writes an explicit false for an SSH profile that leaves reclamation off", () => {
    const config = buildSaveConfig(form({ isSSH: true, sshReclaimTaskDir: false }));

    expect(config.ssh_reclaim_task_dir).toBe("false");
  });

  it("writes the exact string the backend compares when reclamation is on", () => {
    const config = buildSaveConfig(form({ isSSH: true, sshReclaimTaskDir: true }));

    expect(config.ssh_reclaim_task_dir).toBe("true");
  });

  it("never arms reclamation on a non-SSH profile, even from a stale stored value", () => {
    const config = buildSaveConfig(form({ isSSH: false, sshReclaimTaskDir: true }), {
      ssh_reclaim_task_dir: "true",
    });

    expect(config.ssh_reclaim_task_dir).toBeUndefined();
  });
});